Researcher shows how Claude Code can be tricked simply by asking it to summarize a website

A security-news digest covering active exploitation, ransomware, data breaches, supply-chain compromises, AI prompt injection and agent abuse, critical-infrastructure attacks, phishing, malware distribution, and high-severity product vulnerabilities. The most urgent items include an alleged PaperCut zero-day attack, exploitation of an Oracle flaw subject to CISA’s three-day patching deadline, attacks against water and energy infrastructure, ransomware incidents, and malicious Rust package updates targeting developer credentials.